FR2806568A1 - METHOD FOR GENERATING IDENTIFICATION AND AUTHENTICATION DATA - Google Patents

Abstract

The equipment of mobile telephones (1, 2) with interfaces (3, 3 ') for wireless communication in the close vicinity makes it possible to transmit identification and / or authentication data from one of the telephones mobile (2) which contains a data source such as a SIM card (5), to another mobile phone (1) or another corresponding device. The mobile telephone (1) is for example able to resume its operation on the radio network without itself containing the original data source. The close neighborhood link between the mobile telephones (1, 2) is preferably subject to an authorization control of access from the mobile telephone (1), to the identification and / or authentication data of the SIM card. (5).

Description

Technical Field The present invention relates to a method for generating

  the identification and / or authentication data necessary for a first

  device including a first mobile phone.

State of the art

  When a mobile phone uses a service in a network

  radio bucket and if it can for example establish telephone communication

  that, he must identify himself vis-à-vis the transmission facilities of the network with

  identification and / or authentication data so that the installations

  Transmission options control the identity and authorization to access the phone and can charge user fees. The term mobile telephone designates both portable devices and installed devices such as, for example, a radiotelephone of a motor vehicle. The identification and / or authentication data are usually recorded in the i5 smart card called SIM card (subscriber identification module). Such a SIM card is installed according to a relatively complicated procedure in the mobile phone to provide the data necessary for

  identification and / or authentication.

  In many cases, a user with access rights to a radio network such as the GSM network, for example, has more than one mobile phone. In particular, users are frequently encountered having an integrated radio device and a portable telephone such as for example a GSM telephone. These two devices require a SIM card for their operation. However, in general, the manager of a radiotelephone network supplies only one SIM card, so that simultaneously only one telephone can receive the card. If the user wants to use the device in which there is no SIM card, first remove the SIM card from the other device, then place it in the desired device. It is a relatively complicated procedure and

  tedious. It should be performed as often as the user wants to

  cer the SIM card in his mobile phone, when it is not at the location of the integrated phone. On the contrary, if it is located there, it will preferably use the integrated radio device because in general its comfort

of use is greater.

  To avoid the tedious change of SIM cards you can

  use an independent SIM card in each device. But it dou-

  ble the cost of using the radiotelephone network. In addition, some suppliers also offer the possibility of acquiring two SIM cards

  with the same phone number (concept of twin cards). So, vis-à-vis

  vis the radiotelephone network, regardless of the origin which is the mobile phone or the integrated radiotelephone, will appear only one user. But a second SIM card is generally expensive and moreover requires a delicate procedure of use on the radiotelephone because it is necessary to extract the card when leaving the vehicle and store it; when

  reuse the radiotelephone you have to enter your personal code again

nel PIN.

  In addition, apart from mobile phones, there are also

  many electronic devices that require the entry of identification and / or authentication data. This involves, for example, entering the PIN code in bank machines, card dispensers for the purchase of products, access controls at the entrance to establishments, activating the radiotelephone when one gets into a vehicle and actuation of the vehicle ignition; this list is not exhaustive. The known methods for entering data are all

  very complicated and are each designed only for a certain device.

  Description of the invention, problem, solution, and advantage The aim of the present invention is to develop a method and a device making it possible to generate identification data and / or

  authentication when installing multiple devices including

  several radiotelephones to facilitate this procedure.

  This problem is solved by a method of the type defined above.

  above, characterized in that this data is available from a

  second mobile phone via a wireless close neighbor link.

  In the situation mentioned above, a user with

  In two or more mobile telephones but only one source of origin of identification and / or authentication data, namely the SIM card, the method according to the invention considerably facilitates

  the use of mobile phones. Indeed, the user no longer has to intro

  duce the data source (SIM card) in the mobile phone he wants

  use but it can leave this data source in the second tele

  phone mobile because the first mobile phone collects the necessary information via a wireless neighborhood link. By neighborhood link is meant a link the operation of which assumes that the communicating mobile telephones are distant by a distance of less than 20 meters and preferably less than 10 meters. The neighborhood bond

  wireless can be done for example by infrared signals or signals

  radio channels. Limiting the range in the vicinity not only serves-

  security to prevent foreign, uncontrollable devices

  of the user can receive identification data and / or

  thentification. A communication by the neighborhood area is moreover totally sufficient for the aim sought because a user can equip the mobile telephone which he generally has on him anyway, with the

original data source.

  In addition, compared to other devices, the telephone

  bile which is increasingly an essential element, thanks to

  the equipment according to the invention of a closer communication interface

  wireless, becomes an identity module. Thus, all the processes used

  previously used for identity authentication (for example entering the PIN code in a bank machine, the card dispenser when purchasing products, access controls to a company's door , activation of the radiotelephone by getting into the vehicle and actuation of the ignition) can be replaced by the method according to the invention. It is thus always possible to carry out an identification by sending corresponding data by the mobile telephone. Possible entry

  PIN code is only necessary when switching on the remote

  mobile phone which is actually always plugged in and is where the user stays.

  According to a development of the invention, we have an identification

  tion and / or separate authentication, specific to the first device, in particular

  ment of the first mobile phone by the second mobile phone when establishing the close neighborhood link. Data transmission via the near-neighbor link is only carried out if the first

  device or mobile phone is authorized to receive data.

  As the identification and / or authentication data are data

  important data that must be protected against fraud, it must be ensured that only authorized devices or authorized mobile phones can

  access data via this close neighbor link.

  This access is obtained by the process mentioned according to which the first device or mobile telephone which requests the data must all

  first identify and / or authenticate against the second mo- phone

  bile. Once this operation has been carried out, the second mobile telephone can compare the data received with that of the internal, stored data tape and note whether the first device is authorized to receive the desired data. The user of the second mobile phone can define

  itself the devices authorized to receive data by a confi-

  appropriate guration by proceeding in a known manner (as for

  a cordless telephone to a base station).

  According to another development of the invention, the second te-

  the mobile phone stops its proper functioning when it sends the identification and / or authentication data to the first mobile phone. This guarantees that vis-à-vis the radio network, at a given moment, there will always be only one mobile phone which will appear with the identification and / or authentication data. To ensure this with the most

  high security, the second mobile phone preferably stops operating

  telephone operation even before transmitting data

  identification and / or authentication.

  The second mobile phone after stopping its function-

  as a telephone resumes operation from

  preferably as described above when the first phone mo-

  bile has been released for this purpose or if the close neighborhood bond collapses. the

  release by the first mobile phone can then be done if one cons-

  tate that the latter must not and can no longer establish a telephone connection, which excludes the double use of identification data and / or

  authentication. It is also interesting that the second mo-

  bile can resume operation when the close neighbor link has collapsed because in this case the first mobile phone cannot

  not continue operating as a telephone due to the

  matching between access to identification and / or authentication data. Advantageously, the second mobile telephone thus respects a certain waiting time before, after the collapse of the close neighbor link, it in turn resumes telephone operation. This avoids short interruptions leading to permanent switching on and off of the functioning of the telephone. A collapse of the near-neighbor link occurs especially if

  the user and his second mobile phone is far from the first TV

  phone mobile, for example if he leaves a car with a portable mobile phone fitted with an integrated mobile phone (radiotelephone). In this

  case, the telephone mode is restored advantageously on the tele-

  mobile phone which is then the only phone to which the user

has access when leaving his vehicle.

  The invention further relates to a mobile telephone with a

  device to generate identification and / or authentication data

  specification, characterized in that it includes an interface for communication

  wireless communication in the immediate vicinity, and is configured to be able to transmit identification and / or authentication data by

  the interface to another device, notably another phone, or the receivers

  view from the other device including another phone. Thanks to the interface for wireless communication in the nearby area, the mobile phone allows a process like the one defined above to be carried out. In the case of the use of two or more than two

  such mobile phones, it is thus possible to equip only one of the tele-

  mobile phones with the original data source for identification and / or authentication data, such as a card

  SIM and to nevertheless have the possibility of telephoning with another tele-

  phone mobile. The condition is simply that the mobile phone with the data source is in the operating area of the link

  close neighborhood to allow the transmission of necessary data

  res. Example of embodiment of the invention The present invention will be described below using a

  exemplary embodiment shown in the single appended figure.

  The figure shows two mobile phones 1 and 2 having in principle the same structure. The first mobile phone 1 can by

  example being a radiotelephone integrally integrated into a vehicle

  cule and the second mobile phone 2 can be a portable device like

for example a GSM telephone.

  Unlike the first mobile phone 1, the second phone

  mobile phone 2 has a smart card, known as a SIM card, at the plug-in location. This card contains the data

  identification and / or authentication allowing the radio network to

  receive authorization from mobile phone 2 to access the network. In the case of the first mobile phone 1, the corresponding location is empty

  so that in general it cannot work in the radio network.

  But according to the invention, such an operation of the first mobile phone 1 is possible without a SIM card being placed in it; this is possible because the control circuit 4 which supplies the identification and / or authentication data is coupled in the

  first mobile phone 1 with an interface 3 allowing in the vicinity

  swimming near wireless communication. This communication is always done with the second mobile phone 2, the circuit 4 'of which provides identification and / or authentication data while also being connected to a corresponding interface 3'. Via the interfaces 3, 3 ′, it is then possible to transmit the identification and / or authentication data of the

  SIM card 5 from the second mobile phone 2 to the first mobile phone

  bile 1; the latter is then able to establish and maintain a connection

with the radio network.

  The second mobile phone 2 thus serves as an identification module containing the original data source (SIM card 5). As soon as the identification module 2 comes within range of use, that is to say at a distance of approximately 2 meters from the first mobile phone 1, there may be

  have communication between interfaces 3, 3 '.

  To execute telephone operation, the first mobile telephone 1 requires one or more authentication functions (ATF) 1, for example coding and authentication for GSM mode, verification of use by the PIN code or a PUK entry or still, access to a data memory PD related to people or a link with the carrier of these authentication functions ATF 1 and / or PD is required; it can be for example the SIM card 5. The connection between

  mobile phones 1, 2 must be fully automated

  than using another ATV 2 authentication process which can also

  Also include the ATV 1 process or parts of it. The connection is established wirelessly and allows the mobile telephone 1 both to access the personal data memory as well as the ATV method 1. The method

  authentication for communication between the two mo-

  biles 1 and 2, ATV 2 can for example be the process known under the reference

  "Bluetooth", for authentication and for automatic recognition of communication parameters (Bluetooth negotiation procedure). The second mobile telephone (identification module 2), once the connection is actually established with the first radiotelephone but before the ATV 1 process and if necessary PD, deactivates the proper function, for example of the full GSM service because this function would enter into collision with the first mobile phone (for example the full GSM service with a radiotelephone). If you cut the first mobile phone 1 and move away with the second mobile phone 2 from the service section of the first mobile phone 1, until you leave its range

  (in general more than 10 m) then the logical link is preferably new

  established calf and the second mobile phone 2 resumes its own operation if necessary (for example the full GSM service operation). Automatic establishment of a link between the second

  mobile phone 2 and the first mobile phone 1 is preferably configured

  rence by the user of the second mobile telephone 2 so that he can decide which of the mobile telephones 1 to which he gives his identity. For example, connection establishment can be cut or activated for

  only a number of mobile phone groups 1.

  The equipment according to the invention with an interface for communication in the immediate vicinity, wirelessly, gives the mobile telephone which is becoming more and more essential to humans, like an identity module. In the long term, we will be able to activate all the processes used until now for identity authentication (for example a PIN entry in bank machines, card distribution when purchasing products, control of access to the entrance to a business, activation of the radiotelephone when getting into a vehicle and setting

  during ignition) can be replaced by the process described above

  above. We can always identify by sending corresponding data

  from the mobile phone. You may have to enter a PIN code only when switching on the mobile phone always

  connected which is always at the user's place.

Claims (4)

  1) Method for generating the identification data and / or   authentication required for a first device including a pre-   mier mobile phone (1), characterized in that this data is available from a second mobile phone (2) by   a close wireless neighbor link.   2) Method according to claim 1, characterized in that   the second mobile phone (2) performs identification and / or authentication   separate cation from the first device (1), and data transmission by the close neighbor link is only done if the first device (1)   is authorized to receive this data.   3) Method according to any one of claims 1 or 2,   characterized in that the second mobile telephone (2) stops its own operating mode if the identification and / or authentication data are sent to the first mobile phone (1).   4) Method according to claim 3, characterized in that   the second mobile phone (2) resumes operation as a tele-   phone if the first mobile phone (1) releases it or when the connection close neighborhood collapses.    ) Mobile telephone (1, 2) comprising a device (4, 4 ') for providing identification and / or authentication data, characterized in that it comprises an interface (3, 3') for communication without wire in the immediate vicinity, and is configured to be able to transmit identification and / or authentication data via the interface to another device   including another phone, or receive them from the other device including another phone.